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the central computer 



Claims: i 

^ A mobile application security system, comprising: 
a central computer ior controlling the security of a mobile application; 
one or more host co: nputers connected to the server computer, each host computer 
executing the mobile application that jumps between the hosts during execution; 

further comprising means for monitoring the security of the mobile 
application as it jumps between the host computers wherein when the mobile application is 
communicated from a first h :>st to a second host, it passes through the central computer; and 

wherein the security : nonitoring means further comprises means for detecting unwanted 
changes in the code associated with the mobile application when the mobile application is 
jumping between hosts. 

2. The system of Claim 1 , wherein the detecting means further comprises means for 
storing a copy of the mobile application when the mobile application first passes through the 
server, means for receiving thepnobile application after it is executed by another host and means 
for comparing the code of the niobile application after it is executed by another host to the stored 
copy of the mobile application tq determine if changes have been made to the code of the mobile 
application. 

3. The system of Claim 1, wherein the detecting means further comprises means for 
computing a checksum of the mot ile application when the mobile application first passes 
through the server, means for rece: ving the mobile application after it is executed by another 
host, means for computing the che ;ksum of the received mobile application and means for 
comparing the checksum of the mobile application after it is executed by another host to the 
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stored checksum of the mjpbile application to determine if changes have been made to the code of 
the mobile application. 

A mobile application security system, comprising: 
a central computer for controlling the security of a mobile application; 
one or more host computers connected to the server computer, each host computer 
executing the mobile application that jumps between the hosts during execution; 

the central computer urther comprising means for monitoring the security of the mobile 
application as it jumps between the host computers wherein when the mobile application is 
communicated from a first host to a second host, it passes through the central computer; and 
wherein the security monitoring means further comprises means for preventing a host 
from transmitting hostile code in a mobile application to another host. 

5. The system ot Claim 4, wherein the preventing means further comprises means 
for determining if the host dispatching the mobile application is trusted, means for stripping the 

mobile application if the host is not trusted, means for saving the 
, and means, when requested by another host, for providing the 
code for the mobile application to the requesting host. 

A mobile applic ation security system, comprising: 
a central computer for controlling the security of a mobile application; 
one or more host computers connected to the server computer, each host computer 
executing the mobile application that jumps between the hosts during execution; 



code from an initially receive 1 
code of the mobile applicatior 
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the central computer further comprising means for monitoring the security of the mobile 
application as it jumps between the host computers wherein when the mobile application is 
communicated from a first host to a second host, it passes through the central computer; and 

wherein security monitoring means further comprises means for detecting unwanted 
changes in the state of thei mobile application. 

7. The systemlof Claim 6, wherein the detecting means further comprises means for 
saving a copy of the state of a received mobile application, means for receiving the same mobile 
application after a jump to another host and means for comparing the state of the mobile 
application after the jump to another host with the stored state of the mobile application to ensure 
that the state of the mobile application has not changed. 

\^ A mobile application security system, comprising: 

a central computer for controlling the security of a mobile application; 

one or more host computers connected to the server computer, each host computer 
executing the mobile application that jumps between the hosts during execution; 

the central computer further comprising means for monitoring the security of the mobile 
application as it jumps between the host computers wherein when the mobile application is 
communicated from a first host to a second host, it passes through the central computer; and 

wherein the security monitoring means further comprises means for detecting unwanted 
changes in the itinerary of the mobile application. 

9. The system of Claim 8, wherein the detecting means further comprises means for 
saving a copy of the itinerary of a received mobile application, means for receiving the same 
mobile application after a jump to ^nother host and means for comparing the itinerary of the 
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jumping between a first host 



mobile application after the jump to another host with the stored itinerary of the mobile 
application to ensure that the itinerary of the mobile application has not changed. 

10. The system (of Claim 8, wherein the itinerary comprises past historical itinerary 

data. 

\h A mobile application security method, comprising: 
receiving a mobile application at a central computer each time the mobile application is 

and a second host; and 
monitoring the secur ty of the mobile application as it jumps between the host computers, 
wherein the security monitoi ing further comprises detecting unwanted changes in the code 
associated with the mobile a ^plication when the mobile application is jumping between hosts. 

12. The method of Claim 1 1, wherein the detecting further comprises storing a copy 
of the mobile application when the mobile application first passes through the server, receiving 
the mobile application after it is executed by another host and comparing the code of the mobile 
application after it is executed by another host to the stored copy of the mobile application to 
determine if changes have b sen made to the code of the mobile application. 
1*5^ A mobile app lication security method, comprising: 

receiving a mobile application at a central computer each time the mobile application is 
jumping between a first hosl and a second host; and 

monitoring the secur ty of the mobile application as it jumps between the host computers, 
wherein the security monito: ing further comprises preventing a host from transmitting hostile 



code in a mobile application 



to another host. 

v. 
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14. The method of Claim 13, wherein the preventing further comprises determining if 
the host dispatching the mobile application is trusted, stripping the code from an initially 
received mobile application if the host is not trusted, saving the code of the mobile application, 
and, when requested by another host, providing the code for the mobile application to the 



requesting host. 



receiving a mobile applL 



A mobile application security method, comprising: 



cation at a central computer each time the mobile application is 



jumping between a first host and a second host; and 

monitoring the security of the mobile application as it jumps between the host computers, 
wherein the security rc onitoring further comprises detecting unwanted changes in the 

state of the mobile application. 

16. The method of Claim 15, wherein the detecting further comprises saving a copy of 



the state of a received mobile 
another host and comparing 



application, receiving the same mobile application after a jump to 
he state of the mobile application after the jump to another host 
with the stored state of the njiobile application to ensure that the state of the mobile application 
has not changed. 

N 1 S S^ A mobile application security method, comprising: 
receiving a mobile ipplication at a central computer each time the mobile application is 
jumping between a first host and a second host; and 

monitoring the sec xrity of the mobile application as it jumps between the host computers, 
wherein the security monitoring further comprises detecting unwanted changes in the itinerary of 
the mobile application. 
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1 18. The method of Claim 1 7, wherein the detecting further comprises saving a copy of 

2 the itinerary of a received mobile application, receiving the same mobile application after a jump 

3 to another host and comparing /the itinerary of the mobile application after the jump to another 

4 host with the stored itinerary qf the mobile application to ensure that the itinerary of the mobile 

5 application has not changed. 

1 19. The method ofj Claim 1 7, wherein the itinerary comprises past historical itinerary 

2 data. 

1 \^ A mobile application security method, comprising: 

S> receiving a mobile application at a central computer each time the mobile application is 

"fy jumping between a first ho^ and a second host; and 

^4 monitoring the security of the mobile application as it jumps between the host computers, 

£0 / 

wherein the security monitpring further comprises preventing untrusted hosts from initially 

launching mobile applications 
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